Add Authentication + Check Owner on users