new model to hold remote user identities