Update guide to mention has_secure_password