make basic User model w secure pswd