make user authenticatable