finishe basic user model with secure passwords