package.json, user authentication