added basic user model w/ secure password