validations
make a basic user model with secure password