add auth and authorize, create relation with hotels and user