Step 7: create User model with password