User model validates and has_secure_password
User model validates and has_secure_password