Changed authentication to use has_secure_password