make a basic user model (including a secure pwd)