this should be redundant. <code>has_secure_password</code> is sufficient; if your code doesn't run without this line, flag one of us