Make a basic User model (including secure password) (ch. 6 without exercise)