added User model with secure passwords
adds spec for email downcase in model