finshed the user model, with secure password