User class, authentication controller