added password to user model