title: Ruby on Rails 4: has_secure_password is not asking for a password confirmation when creating new user
body: <p>I am currently writing an app using RoR4 and am having trouble with authentication. Even though I've added <code>has_secure_password</code> to the User model, I still seem to be able to create a new user without having to provide a password confirmation.</p>
  
  <pre><code>2.1.2 :012 &gt; me = User.create(:institution_id =&gt; 1, :email =&gt; "me@myschool.edu", :password =&gt; "mypassword")
  (0.1ms)  BEGIN
  User Exists (0.3ms)  SELECT  1 AS one FROM `users`  WHERE `users`.`email` = BINARY  'me@myschool.edu' LIMIT 1
  SQL (0.2ms)  INSERT INTO `users` (`created_at`, `email`, `institution_id`, `password_digest`, `updated_at`) VALUES ('2014-07-14 20:02:34', 'me@myschool.edu', 1, '$2a$10$sD2N.2nxhYO7egzzWxfF5.cdIZ4ds41.sU93Ja3E9Q0qAOaABdZb6', '2014-07-14 20:02:34')
  (8.2ms)  COMMIT
  =&gt; #&lt;User id: 5, institution_id: 1, first_name: nil, last_name: nil, email: "me@myschool.edu", blurb: nil, facebook_link: nil, facebook_token: nil, password_digest: "$2a$10$sD2N.2nxhYO7egzzWxfF5.cdIZ4ds41.sU93Ja3E9Q0...", api_key: nil, active: false, created_at: "2014-07-14 20:02:34", updated_at: "2014-07-14 20:02:34", authentication_token: nil&gt; 
  </code></pre>
  
  <p>Why is this happening? Shouldn't <code>has_secure_password</code> always require a password confirmation as well??</p>
  
  <p>Thanks for the help</p>