annotating models and adding has_secure_password