add password and salt to users
add user model validations
add annotate gem