implemented an user auth model, messed w/ migration #publish