use has_secure_password
add notice adn alert