modelling users with secure password