no longer assume the tenant aware model is always 'User'

resolves #4