add :authenticatable to User model