Add User model and use has_secure_password.