added User model with secure password