working on auth and users' crud