finish making basic user model including secure passwords