adds full user management and authorization