created initial logic for user authorization