Added user model and tests
added validation
Added password
security fix