has_secure_password
fix user