some kind of user credentials validation in backend model