Bugfix: Call has_secure_password before attr_accessible
has_secure_password does not work well if you call attr_accessible
first, it saves password_digest nil.