updated gemfil to include bcrypt
fixed tests in upgrade r3.2-r4.0
password digest migration
remove attr_accessor which makes fields virtual-only
working encrypted password auth with tests