bare-bones user auth function
bare-bones user auth function