more updates to user class, login_spec updates