make a basic User model (incliding secure passwords)
fixing things