made user model (with password)