make a basic User model and secure passwords