Add have_secure_password matcher

See https://github.com/thoughtbot/shoulda-matchers/pull/42