adding user model, including password-hash for authenticatio