make a basic User model (incl. secure passwords)