add bcrypt has_secure_password to user