created user model with password authentication