make a basic User model(include secure password)