added user authentication, admin commands