model users with password security and other contraints for other attributes in user's model'