validating password in the user model, including routes for users and generating user controller