user model with password for rspec