mkae a basic user model incl secure pwd