added has_secure_password