models users
specifies user authentication