make a user model with password