users can now be created and authenticated