basic User model with secure password finish