updated user model and users table with has_secure_password magic

Please review!