add secure password to User
fix typo in users_controller