Add has_secure_password for user
Move custom_validations to its own file