added in users and user authentication / authorization