make a basic User model include secure passswords