added many to many relationship and added authentication & authorization