implement user auth
final commit for the day