done with auth model through tdd