User model completed [with passwords & user show page]