add users controller
make a basic User model (incl. secure passwords)