first rspec tests
search, authentication
added password for strong parameters