make basic user model including secure pwds