adding to user.rb implementation for secure passwords