added has_secure_password, adjusted form accordingly, adjusted user create route