User model password attributes and tests