make a basic user model  secure passwords