created a basic user model, with secure passwords