add the validation of password length and has_secure_password #11