create password auth for User model