Make a better user model (including secure passwords)