validate email format and uniqueness
Add password_digest to db; write failing tests for password
authenticate user with has_secure_password