adding user authenticaiton to /welcome