writing layout
rewriting user model with has_secure_password