added user model with secure_password