make a User model including password