make a bsic user model including secure password