added basic user authentication