make basic user model, including secure passwords