add has_secure_password and feature spec for registering