Why password peppering in Devise library for Rails is not secure | Hacker News Reader