added user models, password validations