improve auth model:
- add adequate reaction for changing user and role