make a basic User model including secure passwords