after section 6.1
after section 6.2
after 6.3.3
Make a basic User model (including secure passwords)