finally a decent auth model, now logs in user once they are newly created