added Security Q&A setter to user, and fixed test running in pom.xml for maven