spec for user authentication
user authentication implemented (basic)
fixed scoping of budget object to go through user