added secure password and user model