added rudimentary user authentication