adding authentication and improving security
adding db