added user authentication
added admin role