users model validations /tests
user authentication with secure pw