Added user model, password auth in place, more tests added