add user model with validations, before_save callback, has_secure_password, and tests woot