User authentication using has_secure_password
To avoid deprecated message