added user authentization