added email & password authentication