Validate authentication

Verify:
- password not empty
- password matches confirmation
- password not too short
- authentication works
Add password and password confirmation to user

Add password and confirmation_password fields User model.
This is implemented with has_secure_password.

Also require a min password length of six.