Added password to User and refactored User model specs

Note how the User model specs used User.create in individual specs; I
created a `subject` that I can reuse in my specs, both explicitly
(subject.email) and implicitly (it { should … }).  By converting to use
subject, we can set the default User object and change it in one place
(DRY!).