adding has secure password to models for andrew to test

if you're not changing the input from the user, testing this seems to be testing ActiveRecord.