- we need to interact with the database through the ORM models - this is where we store user info to the database as a data transfer object - assure that that the password is salted and encrpyted - store emails/usernames (if applicable)