make a basic User model including secure passwords
change to alternate before_save and test for downcase