user validation tests
add user model and password auth