added user authentication; need to add validations