protected password digest from mass assignment