Add basic user controller and model with password validation