add bycrpt gem and update user model validation for password