created authentication : added pw_digest to users -- added has_secure_pw to user model