made basic User model, secured passwords