add user authentication
bcrypt gem