make a basic user model and secure passwords