basic user model + pwd