Simple authentication engine using has_secure_password