add controller for users
Add a basic user model including secure passwords and tests