fix user model, login not tested