auth admin done; implementing auth user;