still need model validations and bcrypt