models/user should find user by email and password