specs were not executing through rake because they weren't added to the development group.
refactored user model/controller and extracted an auth service.