has_secure_password doesn't work on lap28

Since I have migrated from 0.5.8 to lap28 the following code from my client side operation
```
user = User.new(
      username: params.username,
      email: params.email,
      password: params.password,
      password_confirmation: params.password_confirmation
    )
```
generates such an  error: 
undefined method `password=' for <User:0xba4 (0xba2) [new {}]