updated tests
make a basic user model with passwords