adding user model tests, adding password