make a basci user model (including secure)