devise auth with confirmation added, rspec tests for User model