add user model for password authentication