added basic user auth