make abasic User model(including secure passwords)