put password encryption in the model instead of app.rb