User model, controller and tests for AuthAssignment