User model with passwords, and user show page without log