test/implement user construction and password hash