add user authentication and user model/render