add User model with secure passowrds
finish user model