Is there a way to write this spec with state rather than stub? Create a user record with encrypted password? It seems like just about any implementation of User#authenticate would pass it?