added User model with secure password
email downcasing spec and model refactor