removed extra file
added attempt_login action
added has_secure_password