Add user model and password validation