user model and initial auth set up; tests to come