Update User model to enforce unique email and add secure password attr