set up user model in user.js & require auth-related dependencies in app.js