basic secure password and user scaffold setup