added basic user model including passwords