6.26 Use ActiveRecord `has_secure_password` to secure the password