Move to has_secure_password

The following commit is all the changes necessary to more securely
handle passwords in Rails by using the built-in has_secure_password
instead of a home-built and bad solution of storing raw passwords in
the database.

Conflicts:
	app/models/user.rb