verify a id and a password.

add UserModel#verify()

refs #3