make a basic User model, including secure passwords
commit