make a basic user model w/secure password