generated user model with secure pw