make a basic user model with passwords