fix has_secure_password