added a authentication for user to have restrictions in the account