add tests for user.authenticate and password length

* add tests for user.authenticate
    - return the user on correct password
    - return false on incorrect pasword
* add test for minimum password length
    - password must be 6 characters or more
* refactor line order in User model to group email regex and validation