added user model with database encrypted passwords