added the user model, including some (but not all) tests. Next - section 6.3.3 in the book
Make a basic User model (including secure passwords)