Basic user model with secure passwords