make a basiec User model(include secure password)