alternative before_save on user & new downcase password spec
finish user signup