sinatra skeleton plain bcrypt, NOT has_secure_password