relations and User.authenticate; specs passing