make a basic User model, including secure passwords