A user authentication exercise in Rails without the use of has_secure_password