To KISS, let's accept just password in User model for now.
Ported models test from django branch to flask