class Lato::User

def update_password(params)
  unless password_update_code.value
    errors.add(:base, :password_update_code_expired)
    return
  end
  unless password_update_code.value == params[:code]
    errors.add(:base, :password_update_code_invalid)
    return
  end
  password_update_code.value = nil
  update(params.permit(:password, :password_confirmation))
end