Add some comments explaining the code and tests a bit more
Rename User.pending to User._pending to clarify that it is a private attribute