make basic user model w passwords