authentication,sessions and users implemented