authorization, and beginnings of adding new user