update user.rb has secure
update user.rb for has_secure