user authentication working. Fixed before_save / before_create bug