add 'password_salt' column and rename 'password_encrypted' column to 'password_hash'
add auth code (stolen from 'http://railscasts.com/episodes/250-authentication-from-scratch?view=asciicast')