Added auth for users actions
closes #16