done with basic setup of user model (including secure password)