adding user-auth