added user authentication, login