adding basic user authentication