changed user model to real auth system