make basic User model (include secue password)