add user schema and unclude passport-local-mongoose for password management