add users model with expectation of has_secure_password (password digest)