add gem bcrypt-ruby
add has_secure_password
assignment authentication