add logic: database backed auth