renamed user.js to auth.js