User model, Authentication, authorization added