read how to make a basic User model with secure password