noted that we should *not* remove password_digest & remember_token from people table; they are in use in 'devise'