generating user model (has_secure_password) (step 7) done