add bcrypt to gemfile
finish secure password authentication, rspec tests