modified user authentication spec. installed pundit
clean up code