implemented has_secure_password