There are many options when it comes to building authentication into you rails app. A popular option is to use devise, but for more simple projects, Rails inbuilt has_secure_password feature is a valid option. I blogged about it.