make a basec user model (include password)