add InitialPrivilegedUserSpec
use username as password salt in User
add UserSpec
add a utility method to create a user in User