Use annotation, add user model and correspnding tests/validation etc.
Add in password attributes and index email