create user model, add bcrypt to gemfile, building password validation with has_secure_password