added user authentication

- still broken: need to fix