removed password_hash and password_salf from attr_accessor (they weren't being stored)