Add secure passwords to User model
Require password to sign up
Add Sessions controller/login page