add auth stuff to users