basic user model with password and SSL