created user model with secure password and related test spec