make a basic player (user) model incl. secure passwords