auth user on user pages