add has_secure_password gemfile
add has_secure_password model user
migrate create column password_digest e remove column password
refresh current password
migrate remove column password