made encrypt password private
Call encrypt password before user data saved into db
Refactor the test to avoid duplication of creating user
Empty password after saving it
pull out stubbing of BCrypt into before each statement
Added match password method
added sessions controller