added auth via db users