add has_secure_password and related tests (end 6.3.4)