added default user, finalized auth