added hand-off of authentication to user service api. currently blocking call on the future. not great.