Added tests for user.password_required?