move user related apis to models.user