private user auth failed