add user authentication api