takes away the authenticate_user