make a basic user model (include secure passwords)
production check