add has_secure_password to User
remove password from views