make a basic user model, with auth