removed limit on hashed_password column, added authenticate method