improve rspec
Make a basic User model (include secure passwords)
test