user authorization and authentication done