adding user authentication step 1