Basic user model (and secure passwords)
changed regex validation and spec