add basic user model with password authentication