make a basic User model with secure passwords
added user controller