Set up users to use has_secure_password