ch 6: user auth done
add to master