adds pwd column to users table
adds tests for pwd authentication
adds password validation via has_secure_password