move model to separate file
generalize
app has no knowledge about auth info