end of No.6.2.3
Make a basic User model (including secure password)