User model and security