add user authentication, half way