User model with secure passwords complete