make a basic user model (including secure password) - up to p.328, through section 6.4