Don't include ActiveModel::SecurePassword by default.

In all the Rails applications that I've worked so far, I've only used
this module in one model, specifically the `User` model.

I think is bad to assume that every model needs to handle passwords.