add rspec and email and password authentication