authentication model with user data