user auth and sessions added