changed password to secure_password