Passwords now hashed with SHA2 user.updated_password method