did some work on user model. following hartl, stopped off at 6.3.3 - authentication