make a basic user model - secure password