added user auth with bcrypt, added secure_password to User