added basic user model with specs including secure pwds