create user profile
add user authentication, create routes