add user#valid_password?
pass user specs