make a basic user model (include secure password)