make a basic User model  including secure password