user model and validation updates
added password auth to signup
completed user auth