you're using rails now, son(s)! check out has_secure_password and how that works