validate user
make a basic User model (with secure passwords