remove "user" model, move stuff to auth... a little more browsing