user model, encrypt passwords, auhenticate user passwords