adding user authentication feature