adds User model and controller
finishes user auth with BCrypt