make a basic user model, including secure password