use rspec shared examples to eliminate test duplication
make a basic User model (including secure passwords)