A very basic example of a User model with the BCrypt hash on a separate table to prevent direct linking to a user.

See: http://opine.me/a-better-way-to-store-password-hashes/