generate User model
create password and password_confirmation attributes
implement secure signon