finished secure passwords for basic User model