securing by authentication
add user_id to books