refactored: some user_spec eamples
added: rspec tests for User.login