first half of user model, no authentication