Update auth endpoint

* add user model
* check hashed user pass