user: remove unused and misnamed property
makefile: test-with-coverage: don't annotate
tests: dont build assets by default
User: use strategy for passwords.

Still use bcrypt by default, during tests we switch to clear passwords:
great speedup everywhere we are not testing the login process (bcrypt
is designed to be slow)