fix signin/up by removing has_secure_password