still working on removing or using auto generated specs
has_secure_password works