at listing 6.27, just commented out has_secure_password so test will fail
end of chap 6
exercises 2 chap 6