added authentication endpoint to check user in db