added user/item association and authentication