made basic user model w/ secure passwords