Add a User model with password validation