add User model & bcrypt