authenticate method when I declare "has_secure_password" in model/user.rb