added user authentication to app