UserModel manage password
better PostModel