adding user auth functionality