New: User model; including basic hashed passwords.