make a basic user model ( including secure passwords)