added user authentication

only simple authenticator yet