basic user model with passwords system