added secure user auth to user model