fixed has_secure_password trying validations that the auth strategy fails