Authorization

just user authorization working.