add data auth
use migration strictly
add api to sign in