Finish User model, including secure passwords with bcrypt