finishing user model with password