made user model with secure passwords