uncommented has_secure_password, user login still not working