user login and auth added