made a user model with secure password