add bycrupt to gemfile
add bcrypt to user model
add password to attr_accessible in user model