authentication added and product image upload