Move model to models/, fly-by on package ordering
Moving get_user as well; returning user with loaded = False rather than aborting
Misc. comments.

* returning rather than checking boolean return value
* reorder generate hashword return values
Added tests for admin access to profiles