user model is OK, except passwd
finish user model