User authentication

models and associations complete.  will add tests later.