Basic user model(including secure passwords) and authentication