finish user model with authentication