user validations with rspec
make a basic user model including secure passwords