Add working User model with secure passwords