model/user: force timestamps to be in UTC