add user model
revert bac to without password