added authentication and user attributes