make a basic User model ( including  secure passwords)