make basic user model with passwords