Authentication fully working, user/list protected