make a basic user model (with secure password)