Add User class 'has_secure_password' with tests