User model with passwords and user show page getting there