initial tests

this should be a good start to tests but would love some additional eyes on this.

notes: 
- i put the devise secret key in an environment variable
- refactored users#create which i believe simplifies things but hopefully the behavior is still as expected 
- some of the changes are just converting 4 space indentation into 2