add has_secure_password to user model
add validations to user model