make changes to use password_digest instead of storing password