Make a basic User model including secure passwords
minor changes for pw