Use Shoulda, refactor test helpers
Use Shoulda matchers to tidy up the user test
Test invalid password