added missed assets
added users without passwords
full user authentication