add user authenticate

1. add password_digest migaration
2. modify _form.html.erb
3. use sessions controller operate login and logout