make a basic User model including secure passwords
improve email validation