User model including secure password