adding a basic User model with secure passwords.