user auth added