make a basic user model(including secure password)