make basic user model, inc. secure passwords