make a basic user model inc secure passwords