ok the has_secure_password
authentication is also implemented by has_secure_password
previous the length check is not implemented, so last commit maybe in fault state