add user authentication, show user