add user model
authenticate requests.
Scope to user.
Merge branch 'users'