make a simple user model including secure passwords