add password_digest and remember_token to User