pre-authorization lecture commit
makes user authentication work