started work on the user model and tests
added secure password