add some test
Make a basic User model(including secure passwords)