add bcrypt to gemfile
refactor validates logic and add has_secure_password
add migrations for has_secure_password
password confirmation