added authentication for user route