User authentication exercise using has_secure_password. Hopefully extend to more advanced methods in the future.