has_secure_password breaks facebook login. commented out