make a basic user model including secure passwird