added new tests for password confirmation
updated user model to have password stuff