putting in some user authentication