Move validations and has_secure_password to user model, add association to user model