finally added user auth like a BOSS, still needs tweaks