created a user model and auth with bcrypt