add basic User model with password