begin filling out the logic for authenticating users