updated users_spec.js to use verifiable email addresses, also added encrypted Mailgun key