make user model and secure pass