tweaked user model, updated tests and now authentication checks against user model data