Fix credentials/challenges types

Associated identities and credentials are now captured by models in
loopback-component-passport. These two properties will be removed in
2.x.
Add a test case for credentials/challenges
Merge pull request #372 from strongloop/feature/cleanup-user-model

Feature/cleanup user model