create User model
Add secure password authentication to the User model