added has_secure_password spec + inplemp
cleanup