making a User model with secure password