password and confirmation, uncomment app/models/user.rb to get tests to pass