naive implementation of password_digest
has_secure_password