tested models, fixed auth and some constructors