Add user management

should also authenticate user in the before action