added 2-way encoding
added custom user classes to authentication (for SSO)