make a basic user model (including passwords)