modified user.rb/password verification