User model with REST API and CORS enabled by default