make a basic user model : including secure passwords