added password to users model