initial migrations and user validations
added bcrypt, password_digest migration