How is the User success authenticated?