adds password_digest to user, completes section 6.3.1