make user model incl password