Add user auth and right access