lesson 6
added validation
added new tests for password confirmation
updated user model to have password stuff