simplify user model

check for test password in row, this avoids code duplication in login method.
additionally it allows usage of validatePassword with test password.+