started adding user auth