add authentication funcs
adding picture upload funcs