working on authorization
adding user stories