added user model and passport with local strategy, probably buggy