generalize password methods on user Model
This way they are usable in puavo-rest tests too
rest: require RMagick in test helpers
rest: 404 if user has no profile image