make a basic User model (include secure passwords)