fixed issue with has_secure_password