added case study of chapter 4: auth module