improve privileges;
hide password in user details page;
add rspec; remove test; add root user seed;