through 6.3 in hartl tutorial
make a basic user model with secure passwords