Added User model with secure password (bcrypt) hashing and authentication. Added Users controller.