Basic user model  (with secure password)