user authentication validation, and rspec tests