Add User model and RSpec tests
Prevent duplicate email addresses
Check email case insensitively
Make sure email is unique in the database

Also lowercase the email, most databases do case sensitive indices.
Add bcrypt
Add password_digest to Users table
Password and password_confirmation tests
Get initial password tests to pass
Authenticate password, various RSpec tests