class AUTH in model User and session workflow