added user auth and site security