part of user authentication added