make a basic User model(including secure passwords)