added user specs and db migration for authentication