add user authentication --in progress