basics of user model and auth are in place