added the security auth and user stuff