add basic user model with secure password
email format validation improved