user authentication added