adding user authentication