add User model
add local auth handling