create user model, login authentication, sessions