Listing 6.28: user_spec updated for password length and authenticate
Listing 6.29: model validates for min & max password length