users saved to database
merge with authorization