add bcrypt-ruby, has_secure_password, validations on username, sessions controller starting actions, users controller starting actions, routes users, sessions