create a user model with secure passwords