cleans up specs
adds a basic user model, with secure passwords