add users model, tests for auth