make a basic User Model with secure passwords