Finish 6.3.2, add secure password

http://ruby.railstutorial.org/chapters/modeling-users#sec-user_authentication