create user model, authenticating with passport