make a basic user model (chap 6) with secure password