make basic User model (including secure passwords)
add mixed case email check