added a basic user model with password security