changed to not use AUTH_USER_MODEL for easier implementation with
a system where AUTH_USER_MODEL is only used for admin access