modify user model
add auth endpoint