groups fixed?

attr_accesible bug seems to be gone.
possible bug with passwords that change themselves overtime
fixed merge in user.rb