adding user creation
required auth mandatory