make basic user model with security