run migration, has_secure_password on user.rb, gem 'bcrypt-ruby', bundle install