user auth ( http://www.yiiframework.com/extension/auth )