started adding user authentication