updated user model to validate password for all users; all user integration tests passing (login/signup)