make a basic user model -including secure password