add password_confirmation to required params
add user create validations
add db:do rake task
show user does not display password field
removed extra comments from user controller