added basic authorization and authentication for users