adds has_secure_password to user model