added Sorcery for user authentication