add attr_accessor current_password to user.rb