more authentication added to User model