added password particular to yml & validations to user model