make User model password secured