refactor rspec to clean db every time
validate unique email, don't allow invalid users to sign up