add basic user model, including password