aren't you using has_secure_password?  Don't need bcrypt here