modified has_secure_password.rb. add comments.