added authentication and a user session, tied to executive username and password