user model with password added