make a basic user model including secure passwords
Finish sign in but borken test cases