make a user model with password security