Add basic User model including secure passwords
add password maximum length