user model password and authentication
downcase user.email before saving