added user auth stuff