Add basic user model (with secure pw)