with authentication and many to many relationships