add authentication to user model