An example of User Model authentication and authorization