added user model and passwords