validates user's firstname, lastname, email; adds has_secure_password