add User model,authentication