move auth model to a subdir