basuc user model with secure pw
add show page and start with tests