add user auth based on db