add user authentication