Make a basis User model including secure passwords
Add test for email downcasting