make a basic user model(include secure password)