created user model with secure passwords