made a basic user model (including using bcrypt for passwords