make basic user model with secure passw