implemennt user auth and remove function