actually adding the has_secure_password for andrew, for reals this time

if you're checking validations, you should be checking the contents of `@student.errors` for which validations failed and why.