added authentication for users