User model, password, authentication, annotate, bcrypt