password digest added to user model