add User model
update Gemfile with bcrypt
Add secure passwords