make basic User model, including secure passwords