add #valid_for_authentication? to user model