added user model with password confirmation stuff
password authentication magic
tiny test changes