add authentication methods to user model