added authentication route and user model