added ability for users to authenticate themselves