moved user authentication to sidebar