added User model and pswd authent