make a basic user model(include secure passwords)