finish basic User model including secure passwords