change auth model to active record model