relocate models; rename Auth to Authorization