make a basic User model with create including secure passwords