Add User model, some validation
Make basic User model with secure passwords