add create lesson form, and basic user auth check