make User model with secure passwords