add show action & db/stu_id change to string
測試has_secure_password
authenticate 卡關