generate secure password when creating a user

* use 'bcrypt-ruby'
* add 'has_secure_passord' on model
* fix form and controller