add users model and authentication mechanism