add user model features/security