Tighten up specs for users, users_controller, and sessions_controller
add user model methods
Finish auth
add associations specs
add one-step associations