added User model and pass authentication