Add user stories to spec

Unused method argument - `user`. If it's necessary, use `_` or `_user` as an argument name to indicate that it won't be used. You can also write as `sign_in(*)` if you want the method to accept any arguments but don't care about them.