password validation system via has_secure_password. Spec for password validation and authentication