added authentication for diff users in the backend