make a basic User model including secure password