added user model with has_secure_password