add user model with secure passwords