create a new model User
apply schema
add security check
fix the validates bug in User model