make a basic user model (include user security password)