add bcrypt-ruby to Gemfile
password encryption