password field added to user and specs fixed