Merge pull request #3 from henry-p/model-testing

Tests for not storing plain text passwords are passing.
Merge branch 'resources', remote-tracking branch 'origin' into testing
refined routes, added empty controllers