added some user authentication