made basic user model + secure passwords