updated users.authentication