Remove extra gems.
Move password checking from LoginForm to UserAuthenticator.
Add first fixture to test "real" user logging in.