a practice on making strong user authentication in rails