adds user authentication
updated root