Minor tweaks; mostly documentation-related

User.password property now uses attr_accessor!