quick fix: adapt user model to include validation on password length and presence