Development tests

protecting test user info with dotenv-rails (rails 4 will let us do this with .secret, so we'll change this when we transition to that, probably, but this is better for now.)