all new users put into the users.json fixtures, I have the creds saved in an external file so that I can include them in the app later (like I do in railsgoat)