user controller
adds basic user model with secure password