add user and admin auth