new Users resource with BCrypt passwords