bonnus
user model & password authnetication